Re: F31 System-Wide Change proposal: Enable Compiler Security hardening flags by default in G

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Mar 15, 2019 at 04:15:58PM +0000, Richard W.M. Jones wrote:
> On Mon, Mar 11, 2019 at 01:56:14PM -0400, Ben Cotton wrote:
> > https://fedoraproject.org/wiki/Changes/HardenedCompiler
> 
> I'm not opposing this, but is it possible we could do this without
> breaking clang at the same time?
> 
> In the past (and currently) the Fedora compiler flags need some hairy
> editing so they work with clang, eg:
> 
> https://src.fedoraproject.org/rpms/american-fuzzy-lop/blob/master/f/american-fuzzy-lop.spec#_110
> 
> (Actually this is not the latest iteration - latest clang 7 and gcc 9
> and Fedora 30+ needs even more editing, but I didn't push it yet since
> there are other issues with this package.)
> 
> It would be nice if there was a way we could avoid this.

So after rereading the proposal more carefully it seems as if the
proposal is to change the defaults in GCC so no flags would need to be
specified.  Would we consequently remove those flags from the command
line (which would solve my problem above)?

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux